gpe-qa.volvocars.biz

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 04:b8:51:f2:f0:97:39:ee:05:c1:33:a3:94:b4:38:e6 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gpe-qa.volvocars.biz

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b8:51:f2:f0:97:39:ee:05:c1:33:a3:94:b4:38:e6
Serial Number (int): 6273956727962519734052784961028896998
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 86:b8:c0:d3:48:3d:11:43:6b:c0:c3:91:95:7a:3c:f0:f7:62:63:8c
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 4e:e5:ad:0b:f1:05:cb:3d:83:9e:24:04:26:69:32:eb:ba:35:99:db
Fingerprint (sha256): 09:6e:f6:6a:f1:0a:81:67:15:57:cf:ee:f3:ee:00:4d:b6:64:4e:70:54:8e:59:e9:4f:b3:de:e0:d0:ea:0a:c1

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate gpe-qa.volvocars.biz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gpe-qa.volvocars.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gpe-qa.volvocars.biz
urax-qa.volvocars.biz
*.urax-qa.volvocars.biz
*.gpe-qa.volvocars.biz

Other certificates including the domain name volvocars.biz

(limited to 100 certificates)
service-connector.weu-prod.ecpaz.volvocars.biz
content.volvocars.biz
dse.volvocars.biz
www-wslx.volvocars.biz
*.ppe050dspoapp.com
sni1cb76gl.wpc.edgecastcdn.net
tieqa-cn.volvocars.biz
oms-qa.vssm.volvocars.biz
is.volvocars.biz
maspcloud201-manage.volvocars.biz
order.digitalcommerce.volvocars.biz
vhn-se.volvocars.biz
rdm.volvocars.biz
grip.volvocars.biz
lit-test.volvocars.biz
pcp.volvocars.biz
vccbox.volvocars.biz
pydio.volvocars.biz
sni12bfbgl.wpc.edgecastcdn.net
aftersalescompliance.volvocars.biz
compliance.volvocars.biz
se-test-api.volvocars.biz
sni120d7gl.wpc.edgecastcdn.net
organizer-backend-qa.volvocars.biz
urax-qa.volvocars.biz
oms-qa2.vssm.volvocars.biz
gotsvl2004.volvocars.biz
psldm.volvocars.biz
*.apps.volvocars.biz
sigma-identity-prod.vssm.volvocars.biz
appsetup.eu-dev.internal-az.bakery.volvocars.biz
grip-ip-test.volvocars.biz
qa-vcpa.volvocars.biz
usedcarb2b.volvocars.biz
oma-prod.vssm.volvocars.biz
*.smcpdev.volvocars.biz
vcpa.volvocars.biz
live.volvocars.com
smartflow.volvocars.biz
sharedtechnologycontrolt.volvocars.biz
curity-prod.volvocars.biz
mdm.volvocars.biz
sni110d1gl.wpc.edgecastcdn.net
gpe-qa.volvocars.biz
wcs-live-search.test.digitalcommerce.volvocars.biz
mmo.volvocars.biz
qa.digitalcommerce.volvocars.biz
opcrm.volvocars.biz
*.cm.volvocars.biz
oms.vssm.volvocars.biz
cpq.qa.digitalcommerce.volvocars.biz
*.qa.volvocars.biz
sni12bd1gl.wpc.edgecastcdn.net
qacontentstore.volvocars.biz
connectivity.weu-prod.ecpaz.volvocars.biz
dashboard.volvocars.biz
vida-admin-integration.volvocars.biz
pricing.digitalcommerce.volvocars.biz
psldmq.volvocars.biz
se-api.volvocars.biz
smcpstaging.volvocars.biz
tocc.qa.volvocars.biz
chemicalsportal.volvocars.biz
*.gitlab-pages.infradev.volvocars.biz
sni188e9gl.wpc.edgecastcdn.net
tableau.volvocars.biz
sa73gl.wpc.edgecastcdn.net
supplierportal.volvocars.biz
sa73gl.wpc.edgecastcdn.net
analytics.carebyvolvo.volvocars.biz
retailers.volvocars.biz
voc-ccc-na-qa.volvocars.biz
sa73gl.wpc.edgecastcdn.net
sh-pm-lead-service.weu-prod.ecpaz.volvocars.biz
vcamlogin-cn.volvocars.biz
mmo.volvocars.biz
dse.volvocars.biz
content.volvocars.biz
*.gcs-pt-cloud.volvocars.biz
psldm.volvocars.biz
dctcloud.volvocars.biz
gw1.test.api.volvocars.biz
citrix.volvocars.biz
organizer-backend-qa.volvocars.biz
vcamlogin-cn.volvocars.biz
sni11620gl.wpc.edgecastcdn.net
*.qa.volvocars.biz
munki.volvocars.biz
gotsvl2004.volvocars.biz
oms-lb.vssm.volvocars.biz
gotsvl3004.volvocars.biz
sa73gl.wpc.edgecastcdn.net
www-wslxnew.volvocars.biz
sa73gl.wpc.edgecastcdn.net
vccguest.volvocars.biz
*.infradev.volvocars.biz
qa.digitalcommerce.volvocars.biz
sa73gl.wpc.edgecastcdn.net
collaboration.volvocars.biz
qa.pricing.digitalcommerce.volvocars.biz

Certificate

The complete raw certificate details for gpe-qa.volvocars.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN1sOSAvh7Ca8aZIm0xD
ZlQfCpUPeD/7abccRi302mLrU8ZJMnKKRvuOCLIV/1+napfiioYCe+5yWnjNa3q7
IoNMpwSdf1cGMN9I9EekD9GztFj+0hl1ZmK2E4QYT5t5lQasKO+xnOcm660xcwDa
ErhC5O1WVLAATU7G/sXzHw4GdQT2aHN27mxAP68L9hx+TVZRgSA9xjn3mQoF1xSo
DaTtz9b7B0Jm9p6oyEej0u0F/dKMuhI2UgKVGh5TKdLgjwotjQqGTd1TMMt32RDv
ur80iPPr1rPKgwJBkxhI/4yaKr16cpISckJAGt5k5AiZI5tqEwzydgCFab5m/FHb
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6273956727962519734052784961028896998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gpe-qa.volvocars.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19297409980702133254856967071092868650531218354136750496875603215803547593725573148885431319324396089969410024869699182885247053953175277944278831806527890441468536819029596363123885551817827249514292584407974528295105235262950218592527540980568458967520114543517836561516081188137466589003315548543860621062862436066808370729085486054005175651775424669659115122100677775642761643296839152881278208227731555361651296796910966788996730680191582615283075157396819320473605957184342570165701729467456223473974852543243444600025988395408149967965041881615091264563743642156402418557169243393737287481212469673912786082667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86b8c0d3483d11436bc0c391957a3cf0f762638c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpe-qa.volvocars.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urax-qa.volvocars.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urax-qa.volvocars.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gpe-qa.volvocars.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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